[Trend]Malware Targeting Brazil Uses Legitimate Windows Components WMI and CertUtil as Part of its Routine

[igor51]

Malware Targeting Brazil Uses Legitimate Windows Components WMI and CertUtil as Part of its Routine

We recently found a malware that abuses two legitimate Windows files — the command line utility wmic.exe  and certutil.exe, a program that manages certificates for Windows — to download its payload onto the victim’s device. What’s notable about these files is that they are also used to download other files as part of its normal set of features, making them susceptible to abuse for malicious purposes.

The post Malware Targeting Brazil Uses Legitimate Windows Components WMI and CertUtil as Part of its Routine appeared first on .

Source: Malware Targeting Brazil Uses Legitimate Windows Components WMI and CertUtil as Part of its Routine